Enduser accessTags (granting access without care teams)

What are accessTags?

Access Tags allow non-Admin users to gain access to groups of patients (Endusers) without needing to be assigned to each Enduser’s care team. Like care team assignment, the Read access permission for Endusers should be “Default” or “Shared”. For related patient data models, “Assigned” access allows users to view data (e.g. Tickets) for patients who are accessible by accessTags.

The Enduser model includes a field called “accessTags” which is a list of strings, representing groups who should be able to access the patient

Users’ existing “tags” model is used to store the groups they are a part of

💡 If any of a user’s tags are included in a patient’s accessTags field, the user will have access to that patient

An example

An MSO manages 3 ACOs (ACO1, ACO2, and ACO3). Assuming we have 1 patient in each ACO, the patient in ACO1 would have accessTags “MSO” and “ACO1”. The other patients would be tagged accordingly, both with “MSO”, and then with “ACO2” and “ACO3” accordingly.

A User with the tag “MSO” would be able to view all patients, since they are all tagged “MSO”. A user with the tag “ACO1”, but without the “MSO” tag, would only be able to view the “MCO1” patient.

If a user manages multiple ASOs but doesn’t need MSO-wide access, they could be tagged with both ACO1 and ACO2.

As you can see, accessTags provide significant flexibility to supporting complicated user hierarchies and roles, without needing the complexity of sub-organizations or care team assignment automation

Enabling accessTags

accessTags must first be enabled by your organization, as they are not active by default

This can be activated at /organization-settings#contacts-access

Including accessTags on new Endusers

Via API

Include a list of strings as the accessTags field when creating a patient

In Tellescope (CSV Import)

CSV import will recognize the “accessTags” column, and will import comma-separated tags as accessTags

Example CSV (imports a user with access tags [”tag1”, “tag2”])

import_with_access_tags.csv

Updating accessTags

Via API

Include a list of strings as the accessTags field when updating a patient

• By default, will append provided accessTags
• To replace with the provided value, use the { “replaceObjectFields”: “true” } option

Via Trigger

Use the “Add Access Tags” trigger to automatically add access tags when certain trigger conditions are met

In Tellescope

Select the Contacts you’d like to update, and then click the “Update Fields” icon

Make sure Update accessTags is checked (otherwise, regular tags will be updated)

Select “Add accessTags” to append new tags to each contact. Otherwise, select “Replace accessTags” to modify the current accessTags to exactly the ones you provide

Then, click save to perform the bulk update

Viewing accessTags

You can create a custom view for the Patients/Contacts list in Tellescope and include “Access Tags” as a column in order to view existing accessTags